Description
QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets.
References
- 26034 third-party-advisory
- 1018373 vdb-entry
- 36131 vdb-entry
- TA07-193A third-party-advisory
- ADV-2007-2510 vdb-entry
- 24873 vdb-entry
- http://docs.info.apple.com/article.html?artnum=305947
- APPLE-SA-2007-07-11 vendor-advisory
- quicktime-java-information-disclosure(35361) vdb-entry